https://vulnogram.org/ Most recent CVEs assigned by Forcepoint (forcepoint). https://vulnogram.org/seaview/icons/forcepoint.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-12974 https://vulnogram.org/CVE-2026-12974 A Security Policy Bypass vulnerability exists in Forcepoint Security Engine (NGFW). This issue affects Forcepoint Security Engine (NGFW): from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0. High Network Exploitable Wed, 23 Sep 2026 13:27:22 GMT https://vulnogram.org/CVE-2026-11970 https://vulnogram.org/CVE-2026-11970 This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758. Medium Thu, 13 Aug 2026 09:47:24 GMT https://vulnogram.org/CVE-2025-12694 https://vulnogram.org/CVE-2025-12694 A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user to escalate privileges to SYSTEM. This issue affects VPN Client for Windows: versions 6.11.3 and prior. High Thu, 04 Jun 2026 12:04:33 GMT https://vulnogram.org/CVE-2025-2274 https://vulnogram.org/CVE-2025-2274 Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Stored XSS.This issue affects Web Security through 8.5.6. Medium Mon, 16 Mar 2026 14:46:50 GMT https://vulnogram.org/CVE-2025-12690 https://vulnogram.org/CVE-2025-12690 Execution with unnecessary privileges in Forcepoint NGFW Engine allows local privilege escalation.This issue affects NGFW Engine through 6.10.19, through 7.3.0, through 7.2.4, through 7.1.10. High Wed, 11 Mar 2026 15:36:32 GMT https://vulnogram.org/CVE-2025-2272 https://vulnogram.org/CVE-2025-2272 Uncontrolled Search Path Element vulnerability in Forcepoint FIE Endpoint allows Privilege Escalation, Code Injection, Hijacking a privileged process.This issue affects FIE Endpoint: before 25.05. High Thu, 22 May 2025 12:23:05 GMT https://vulnogram.org/CVE-2024-9103 https://vulnogram.org/CVE-2024-9103 Improper Neutralization of Script in Attributes in a Web Page vulnerability in Forcepoint Email Security (Blocked Messages module) allows Stored XSS. This issue affects Email Security through 8.5.5. Medium Network Exploitable Mon, 24 Mar 2025 16:06:39 GMT https://vulnogram.org/CVE-2024-2166 https://vulnogram.org/CVE-2024-2166 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email Security (Real Time Monitor modules) allows Reflected XSS.This issue affects Email Security: before 8.5.5 HF003. High Network Exploitable Wed, 04 Sep 2024 21:37:17 GMT https://vulnogram.org/CVE-2023-6452 https://vulnogram.org/CVE-2023-6452 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Web Security (Transaction Viewer) allows Stored XSS. The Forcepoint Web Security portal allows administrators to generate detailed report… Critical Network Exploitable Thu, 22 Aug 2024 15:21:32 GMT https://vulnogram.org/CVE-2023-5451 https://vulnogram.org/CVE-2023-5451 Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client downloads and ECA configuration downloads. Improper Neutralization of Input During Web Page Generation ('Cross-site… Medium Network Exploitable Mon, 04 Mar 2024 15:54:43 GMT https://vulnogram.org/CVE-2023-1705 https://vulnogram.org/CVE-2023-1705 Missing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows (bgAutoinstaller service modules) allows Privilege Escalation, Functionality Bypass.This issue affects F|One SmartEdge Agent: before 1.7.0.230330-554. High Mon, 29 Jan 2024 16:29:18 GMT https://vulnogram.org/CVE-2023-2080 https://vulnogram.org/CVE-2023-2080 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud allows Blind SQL Injection. High Thu, 15 Jun 2023 22:18:58 GMT https://vulnogram.org/CVE-2023-26292 https://vulnogram.org/CVE-2023-26292 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_submit.mhtml modules), Forcepoint Web Secu… Medium Network Exploitable Wed, 29 Mar 2023 16:29:49 GMT https://vulnogram.org/CVE-2023-26291 https://vulnogram.org/CVE-2023-26291 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_form.mhtml modules), Forcepoint Web Securi… Medium Network Exploitable Wed, 29 Mar 2023 16:29:41 GMT https://vulnogram.org/CVE-2023-26290 https://vulnogram.org/CVE-2023-26290 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_reset_request.mhtml modules), Forcepoint W… Medium Network Exploitable Wed, 29 Mar 2023 16:28:47 GMT https://vulnogram.org/CVE-2022-1700 https://vulnogram.org/CVE-2022-1700 Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Gateway, Email Security with DLP… High Network Exploitable Mon, 12 Sep 2022 18:07:05 GMT https://vulnogram.org/CVE-2022-27609 https://vulnogram.org/CVE-2022-27609 Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows does not provide sufficient anti-tampering protection of services by users with Administrator privileges. This could result in a user disabling Forcepoint One Endpoint and… Medium Mon, 04 Apr 2022 19:45:38 GMT https://vulnogram.org/CVE-2022-27608 https://vulnogram.org/CVE-2022-27608 Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administrator privileges. This could result in a user disabling anti-tampering mechanisms which would then allow the u… Medium Mon, 04 Apr 2022 19:45:36 GMT https://vulnogram.org/CVE-2021-41530 https://vulnogram.org/CVE-2021-41530 Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been configured. Mon, 04 Oct 2021 16:58:41 GMT https://vulnogram.org/CVE-2020-6590 https://vulnogram.org/CVE-2020-6590 Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure. Thu, 08 Apr 2021 21:32:59 GMT https://vulnogram.org/CVE-2019-6146 https://vulnogram.org/CVE-2019-6146 It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host header injection. CVSSv3.0: 5.3 (Medium) (/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Wed, 22 Jan 2020 16:10:21 GMT https://vulnogram.org/CVE-2019-6147 https://vulnogram.org/CVE-2019-6147 Forcepoint NGFW Security Management Center (SMC) versions lower than 6.5.12 or 6.7.1 have a rare issue that in specific circumstances can corrupt the internal configuration database. When the database is corrupted, the SMC might produce an incorrect… Mon, 23 Dec 2019 19:17:18 GMT https://vulnogram.org/CVE-2019-6142 https://vulnogram.org/CVE-2019-6142 It has been reported that XSS is possible in Forcepoint Email Security, versions 8.5 and 8.5.3. It is strongly recommended that you apply the relevant hotfix in order to remediate this issue. Tue, 05 Nov 2019 20:49:15 GMT https://vulnogram.org/CVE-2019-6144 https://vulnogram.org/CVE-2019-6144 This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint (versions 19.04 through 19.08) and bypass DLP and Web protection. Wed, 23 Oct 2019 18:57:51 GMT https://vulnogram.org/CVE-2019-6145 https://vulnogram.org/CVE-2019-6145 Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables to the vulnerable directories.… Fri, 20 Sep 2019 19:56:34 GMT https://vulnogram.org/CVE-2019-6143 https://vulnogram.org/CVE-2019-6143 Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access se… Tue, 20 Aug 2019 20:24:21 GMT https://vulnogram.org/CVE-2019-6140 https://vulnogram.org/CVE-2019-6140 A configuration issue has been discovered in Forcepoint Email Security 8.4.x and 8.5.x: the product is left in a vulnerable state if the hybrid registration process is not completed. Tue, 09 Apr 2019 20:51:32 GMT https://vulnogram.org/CVE-2018-16530 https://vulnogram.org/CVE-2018-16530 A stack-based buffer overflow in Forcepoint Email Security version 8.5 allows an attacker to craft malicious input and potentially crash a process creating a denial-of-service. While no known Remote Code Execution (RCE) vulnerabilities exist, as with… Tue, 09 Apr 2019 18:47:04 GMT https://vulnogram.org/CVE-2018-16529 https://vulnogram.org/CVE-2018-16529 A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period or after the URL has already been used to reset a password. Thu, 28 Mar 2019 16:02:03 GMT https://vulnogram.org/CVE-2019-6139 https://vulnogram.org/CVE-2019-6139 Forcepoint User ID (FUID) server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this vulnerability may lead to remote code execution. To fix this vulnerability, upgrade to FUID versio… Thu, 07 Feb 2019 23:00:00 GMT